Search & access to Albums with permissions set

kdasu

Joined: 2002-08-31
Posts: 6
Posted: Sat, 2002-09-14 16:14

I have noticed one thing with the Gallery Search engine regards to album viewing permission. In a case where a user needs to be logged in to view the album and you have provided the search on you root page, then if anybody performs a search on any matching keywords the user get access to the album without logging in.
Am I missing something or this is a known issue ?

My solutions to this is
1) to provide the serach only in case user is loggedin in albums.php or
2) have a check in the search.php to see if the user is loggedin before goig ahead and searching.

-kdasu
 
bharat
bharat's picture

Joined: 2002-05-21
Posts: 7994
Posted: Sun, 2002-09-15 08:53

There was a bug about this way back in 1.2.6 (?) but it has been fixed.

The search interface will only show results that you're allowed to see, based on your logged-in/not-logged-in status.

Remember, however, that you can have public albums hidden under private albums. You can't navigate to them, but you can enter a link to the album directly. These albums will show up in the search interface.